This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer (raw, json) Hash identifier: 7PK+CHLSomymnqf/8yc7dGOpNgF/PyhPrqaVclnKo/k= Subject key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775968D3AC29DC3CB1D90132FF0DEDB4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205025 IP: 2a0d:1dc0::/29 IP: 2a0d:4940::/29 IP: 2a0e:abc0::/29 IP: 2a0f:4780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:68:d3:ac:29:dc:3c:b1:d9:01:32:ff:0d:ed:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:5a:74:fe:53:41:10:0e:da:f3:da:df:b3: 07:31:b0:7d:13:50:ad:2e:ef:64:25:83:e4:48:81: e3:a6:a3:bc:73:5a:c5:57:6f:d6:dc:27:45:2e:97: a1:db:5c:2f:60:b2:66:5b:e9:77:aa:32:9a:83:b4: a4:85:57:55:b1:c8:76:cc:ff:03:22:83:5c:5d:99: d6:c7:02:f1:77:7a:a5:c3:82:37:69:3c:91:a5:1d: c3:e7:47:6c:cb:8a:68:43:a2:80:c6:b4:e8:c3:7c: 44:2e:e4:fb:23:7b:19:75:db:cb:c4:d9:8b:6d:e9: f9:39:31:fd:c4:f3:41:72:d2:8a:8a:d3:9f:8f:60: ed:96:14:88:5f:a1:31:44:18:ce:29:f4:ac:8e:c6: 0d:8f:20:44:61:0b:df:f6:cd:c7:ef:20:53:5e:a8: 6b:86:b1:89:b8:71:9b:e8:63:9c:2c:f9:03:4f:eb: 83:8f:c3:ce:fb:6c:bc:7e:4f:33:d0:04:e5:33:6f: b4:ac:60:0e:21:dc:e5:50:9e:d9:34:61:2b:4b:0c: cd:db:97:25:f4:51:bb:11:1e:a7:89:c6:db:a2:06: 24:cb:04:ac:9b:99:42:6d:20:f3:e9:6b:2f:ca:f7: 71:83:4e:82:41:eb:99:23:12:03:11:ff:45:90:82: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1dc0::/29 2a0d:4940::/29 2a0e:abc0::/29 2a0f:4780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205025 Signature Algorithm: sha256WithRSAEncryption 63:90:c8:ef:9d:77:36:18:e2:b1:06:1b:a1:23:87:d6:4f:b8: f9:99:48:9b:89:3c:24:28:e5:b3:79:51:a1:a1:39:84:73:52: 70:f3:37:03:3d:9c:83:1c:43:af:21:03:58:66:66:a0:a4:66: ab:6f:15:d8:30:8a:35:69:b2:b2:4d:c7:63:09:28:68:3a:4d: bc:b1:42:85:3f:5f:02:06:46:77:c9:ae:4b:37:2a:2e:6d:14: f1:59:57:2b:d6:f3:a8:19:32:4e:b8:7a:69:55:56:91:32:68: f9:f9:da:80:36:f5:78:a1:d1:5d:6a:74:57:77:7d:57:f9:f1: 2b:7e:86:0f:59:32:40:ac:9c:b9:94:6f:f4:59:6e:ca:cd:0b: 06:06:bb:43:43:b0:c8:32:40:32:a0:80:71:98:84:b5:e4:83: 72:4e:84:81:a0:0a:2e:43:91:66:cd:88:cd:cf:d2:4b:d3:2e: 99:34:a6:c1:26:71:a8:8d:78:ea:cc:de:be:57:76:1e:d4:8c: 2b:22:d0:47:01:8f:54:c9:7b:4c:c7:89:75:15:54:bd:57:09: fc:02:83:7a:59:ee:14:c0:f1:19:15:f5:18:b5:28:0e:7c:f2: c5:97:07:b3:10:84:43:2b:7b:ca:bb:72:5e:46:d3:84:5b:64: 53:f4:9a:e8 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt3WWjTrCncPLHZATL/De20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWI5YTNjZTBmNTkzOTEwODE5YzMyNzFlMWU4ZDBiZDEzNzFhNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZadP5TQRAO2vPa37MHMbB9E1Ct Lu9kJYPkSIHjpqO8c1rFV2/W3CdFLpeh21wvYLJmW+l3qjKag7SkhVdVsch2zP8D IoNcXZnWxwLxd3qlw4I3aTyRpR3D50dsy4poQ6KAxrTow3xELuT7I3sZddvLxNmL ben5OTH9xPNBctKKitOfj2DtlhSIX6ExRBjOKfSsjsYNjyBEYQvf9s3H7yBTXqhr hrGJuHGb6GOcLPkDT+uDj8PO+2y8fk8z0ATlM2+0rGAOIdzlUJ7ZNGErSwzN25cl 9FG7ER6nicbbogYkywSsm5lCbSDz6Wsvyvdxg06CQeuZIxIDEf9FkIL4FQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFOG5o84PWTkQgZwyceHo0L0Tcaa+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzBkOGJl OC1iNGI0LTQzNmUtODZlMi1iYTRjNTZkOGMwY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMGQ4YmU4 LWI0YjQtNDM2ZS04NmUyLWJhNGM1NmQ4YzBjZS8xLzRibWp6ZzlaT1JDQm5ESng0 ZWpRdlJOeHByNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAiBAIAAjAcAwUDKg0dwAMFAyoNSUADBQMqDqvAAwUDKg9HgDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIOEwDQYJKoZIhvcNAQELBQADggEBAGOQ yO+ddzYY4rEGG6Ejh9ZPuPmZSJuJPCQo5bN5UaGhOYRzUnDzNwM9nIMcQ68hA1hm ZqCkZqtvFdgwijVpsrJNx2MJKGg6TbyxQoU/XwIGRnfJrks3Ki5tFPFZVyvW86gZ Mk64emlVVpEyaPn52oA29Xih0V1qdFd3fVf58St+hg9ZMkCsnLmUb/RZbsrNCwYG u0NDsMgyQDKggHGYhLXkg3JOhIGgCi5DkWbNiM3P0kvTLpk0psEmcaiNeOrM3r5X dh7UjCsi0EcBj1TJe0zHiXUVVL1XCfwCg3pZ7hTA8RkV9Ri1KA588sWXB7MQhEMr e8q7cl5G04RbZFP0mug= -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:14 2026 by rpki-client